HTML report / ignore-unfixed

.gitlab-ci.yml

@@ -13,12 +13,7 @@ scan image:
     name: aquasec/trivy
     entrypoint: [""]
   script:
-    - trivy --cache-dir .cache \
-      --exit-code 1 \
-      --severity HIGH,CRITICAL \
-      --format table --output report.md  \
-      --vuln-type os \
-      $CI_PROJECT_PATH_SLUG:$CI_COMMIT_SHORT_SHA
+    - trivy image --ignore-unfixed --format template --template "@contrib/html.tpl" -o report.html $CONTAINER_TEST_IMAGE 
   cache:
     key: trivy-cache
     paths:
@@ -26,7 +21,7 @@ scan image:
   artifacts:
       name: "Container Scan Report ${CI_COMMIT_SHA}"
       paths:
-        - report.md
+        - report.html
       expire_in: 7 days
       when: on_failure